xml-security-c 2.0.1-1 stretch backport [was: Re: shibboleth-sp 3.x package sources?]

[Etienne Dysli Metref]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

On 02/11/2018 15:02, Cantor, Scott wrote:
> I don't think there are real dependencies

Oh really? that would be convenient :)

I've just hacked configure.ac to build with xerces-c 3.1, but it fails
with:

> utils/XSECSafeBuffer.cpp: In member function 'void
> safeBuffer::checkAndExpand(XMLSize_t)': 
> utils/XSECSafeBuffer.cpp:63:13: error: 'XERCES_SIZE_MAX' was not
> declared in this scope if (size > XERCES_SIZE_MAX -
> DEFAULT_SAFE_BUFFER_SIZE) { ^~~~~~~~~~~~~~~ 
> utils/XSECSafeBuffer.cpp: In member function 'XMLSSize_t
> safeBuffer::sbStrstr(const char*) const': 
> utils/XSECSafeBuffer.cpp:368:8: warning: comparison between signed
> and unsigned integer expressions [-Wsign-compare] if (d >
> bufferSize || d < 0) ~~^~~~~~~~~~~~ utils/XSECSafeBuffer.cpp: In
> member function 'XMLSSize_t safeBuffer::sbOffsetStrstr(const char*,
> XMLSize_t) const': utils/XSECSafeBuffer.cpp:389:8: warning:
> comparison between signed and unsigned integer expressions
> [-Wsign-compare] if (d > bufferSize || d < 0) ~~^~~~~~~~~~~~ 
> Makefile:2757: recipe for target
> 'utils/libxml_security_c_la-XSECSafeBuffer.lo' failed

Is the first error a dependency then? or is it my ignorance of GNU
autotools interfering...

On the other hand, I could rebuild xerces-c 3.2 from buster as is on
stretch so a backport of it isn't out of question.

 Etienne
-----BEGIN PGP SIGNATURE-----
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=m2Oz
-----END PGP SIGNATURE-----